$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa File: 2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa (raw, json) Hash identifier: QGwQLQuyCaVuLNRxBkTjyCKL0iVjsjiSnNQOaq3DeX0= Subject key identifier: 24:3C:D8:3F:46:61:ED:C3:3F:A5:07:CE:BB:CC:0D:24:D7:AE:38:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584548FC887E113F2DCB8EA17A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa Signing time: Thu 21 Mar 2024 21:13:06 +0000 ROA not before: Thu 21 Mar 2024 21:13:06 +0000 ROA not after: Wed 19 Jun 2024 21:13:06 +0000 asID: 396982 IP address blocks: 34.94.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:fc:88:7e:11:3f:2d:cb:8e:a1:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 21 21:13:06 2024 GMT Not After : Jun 19 21:13:06 2024 GMT Subject: CN=93502410-3ffb-499b-98aa-46d7824494a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b6:12:97:a3:d5:4a:1b:47:42:a8:c7:45:b4: 49:68:25:30:dd:e7:27:11:dc:91:a3:a6:eb:9c:09: 61:04:24:c1:9d:8e:cd:b2:75:61:b3:7d:d8:d5:ed: 4c:13:d4:1f:9e:07:48:d7:12:58:aa:bc:e2:46:f7: 93:b4:73:3f:4f:72:7e:5c:de:81:56:38:47:0a:4e: 35:85:95:1e:e3:a5:42:88:5d:23:7c:17:d3:c8:2a: 3e:6d:aa:7c:75:e6:35:c2:4b:52:e8:e8:c2:5c:4c: a9:3a:7d:b7:75:33:51:57:d5:48:a6:ae:a0:dc:3a: 60:57:03:77:e8:9e:ab:7a:ca:8d:69:7f:d3:c3:40: 40:29:74:6c:19:95:9b:d9:76:31:02:ad:3d:10:9b: 53:59:d4:d8:b6:14:e3:5e:3d:f7:72:8f:22:db:a8: ce:48:4a:e4:0d:b8:0f:77:be:1d:40:b0:da:3f:14: 1c:91:31:e4:91:21:9a:3d:d6:92:2b:98:98:1d:d9: 1c:fb:7a:3a:74:6e:cd:a4:34:c4:8c:e1:af:7d:32: c2:49:1c:b9:a9:21:ed:1c:a7:22:75:a3:a9:fd:0e: 20:fc:4e:40:06:32:2d:fc:6c:58:3d:91:7e:50:23: 0f:f3:24:3a:69:3a:e9:69:db:1c:eb:34:89:1f:27: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3C:D8:3F:46:61:ED:C3:3F:A5:07:CE:BB:CC:0D:24:D7:AE:38:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9f:ba:c0:30:e7:0c:3d:42:d2:b4:3d:72:67:cf:01:f4:e9: 6a:ac:a4:82:b6:31:0e:31:5d:60:e7:a6:4d:4f:b5:36:98:64: b3:66:93:08:ae:04:18:5f:a1:e3:7a:64:7a:26:d3:89:43:14: 72:57:f3:45:3b:b6:33:40:4c:40:56:38:e6:f2:e4:7b:55:ff: a5:fb:50:9d:ca:6b:ab:9b:c0:73:91:44:96:3e:cb:e8:9e:be: 97:59:38:0a:8f:1b:73:a5:05:be:04:ae:67:39:4e:f6:d1:ae: 46:b8:85:5c:d1:97:6f:df:48:08:fd:2d:f4:71:0d:9f:c9:3c: 8d:b0:73:e8:39:d1:04:f7:71:df:b1:19:5c:4d:9d:50:29:28: 2b:0e:90:c1:b4:03:68:87:52:e2:7b:3d:36:a9:51:57:e5:57: 49:78:9d:52:10:f4:e3:99:22:65:3b:a1:32:9a:4f:b9:5d:11: 8c:d6:a4:6d:a8:e3:6d:d3:48:15:39:f2:4f:ec:2d:74:c6:02: 2a:0d:e8:80:69:b4:9e:99:4b:27:0f:a5:89:da:9c:f5:8d:ad: 38:ec:18:1c:30:b2:cd:73:b9:b5:da:fb:16:63:21:ec:f4:6a: 49:14:72:d5:ee:03:6c:e2:10:42:c3:c5:cc:5a:55:14:b5:ea: 4c:37:8b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/Ih+ET8ty46heoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MDMyMTIxMTMwNloXDTI0MDYxOTIxMTMwNlowLzEtMCsGA1UEAxMk OTM1MDI0MTAtM2ZmYi00OTliLTk4YWEtNDZkNzgyNDQ5NGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorYSl6PVShtHQqjHRbRJaCUw3ecnEdyRo6br nAlhBCTBnY7NsnVhs33Y1e1ME9QfngdI1xJYqrziRveTtHM/T3J+XN6BVjhHCk41 hZUe46VCiF0jfBfTyCo+bap8deY1wktS6OjCXEypOn23dTNRV9VIpq6g3DpgVwN3 6J6resqNaX/Tw0BAKXRsGZWb2XYxAq09EJtTWdTYthTjXj33co8i26jOSErkDbgP d74dQLDaPxQckTHkkSGaPdaSK5iYHdkc+3o6dG7NpDTEjOGvfTLCSRy5qSHtHKci daOp/Q4g/E5ABjIt/GxYPZF+UCMP8yQ6aTrpadsc6zSJHydFBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQ82D9GYe3DP6UHzrvMDSTXrjjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ1MTExYjctYTAwMi0z ZWM5LWI1ZTQtYjk0ZmIwMWYyNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACefusAw5ww9QtK0PXJnzwH06WqspIK2MQ4xXWDnpk1PtTaYZLNmkwiu BBhfoeN6ZHom04lDFHJX80U7tjNATEBWOOby5HtV/6X7UJ3Ka6ubwHORRJY+y+ie vpdZOAqPG3OlBb4Ermc5TvbRrka4hVzRl2/fSAj9LfRxDZ/JPI2wc+g50QT3cd+x GVxNnVApKCsOkMG0A2iHUuJ7PTapUVflV0l4nVIQ9OOZImU7oTKaT7ldEYzWpG2o 423TSBU58k/sLXTGAioN6IBptJ6ZSycPpYnanPWNrTjsGBwwss1zubXa+xZjIez0 akkUctXuA2ziEELDxcxaVRS16kw3iws= -----END CERTIFICATE-----Generated at Sun May 5 15:48:59 2024 by rpki-client on console-ams.rpki-client.org